Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortinet_fortiisolator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortinet Fortiisolator (7cbb97d8-e326-5644-8272-eedd64973642)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41020 vulnerable 2026-06-08 05:35:19.485606 Details available
HIGH (8.8)
An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.
Published: 2022-05-04T15:25:10.000Z
Updated: 2024-10-25T13:32:21.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6649 vulnerable 2026-06-08 05:26:45.601702 Details available
An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)
Published: 2021-02-08T15:53:06.000Z
Updated: 2024-10-25T14:23:02.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6643 vulnerable 2026-06-08 05:26:45.587889 Details available
An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack (XSS).
Published: 2020-03-12T21:20:50.000Z
Updated: 2024-10-25T14:03:06.410Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.